WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
easy-form
Published
2025-02-21
Title
Easy Form by AYS < 2.7.0 - Reflected Cross-Site Scripting
Slug
easy-form
Published
2025-11-28
Title
Easy Form < 2.7.9 - Missing Authorization
Slug
easy-form-builder
Published
2022-11-16
Title
Easy Form Builder < 3.4.0 - Admin+ Stored XSS
Slug
easy-form-builder
Published
2024-03-29
Title
Easy Form Builder < 3.7.5 - Authenticated (Contributor+) SQL Injection
Slug
easy-form-builder
Published
2025-01-07
Title
Easy Form Builder < 3.8.9 - Missing Authorization to Authenticated (Subscriber+) Stored Cross-Site Scripting
Slug
easy-form-builder
Published
2025-08-07
Title
Easy Form Builder < 3.8.16 - Unauthenticated SQL Injection
Slug
easy-form-builder
Published
2025-12-15
Title
Easy Form Builder < 3.8.21 - Missing Authorization
Slug
easy-form-builder
Published
2026-01-06
Title
Easy Form Builder <= 3.9.6 - Missing Authorization
Slug
easy-form-builder
Published
2026-02-13
Title
Easy Form Builder < 3.9.4 - Missing Authorization to Authenticated (Subscriber+) Sensitive Form Response Data Exposure
Slug
easy-form-builder-by-bitware
Published
2021-03-26
Title
Easy Form Builder by Bitware <= 1.0 - Authenticated Arbitrary File Upload
Slug
easy-form-builder-by-bitware
Published
2021-03-27
Title
Easy Form Builder by Bitware <= 1.0 - Unauthorised AJAX calls
Slug
easy-gallery-slideshow
Published
2021-08-09
Title
Titan Framework <= 1.12.1 - Reflected Cross-Site Scripting (XSS)
Slug
easy-github-gist-shortcodes
Published
2026-01-06
Title
Easy GitHub Gist Shortcodes <= 1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'id' Shortcode Attribute
Slug
easy-google-map
Published
2021-08-09
Title
Titan Framework <= 1.12.1 - Reflected Cross-Site Scripting (XSS)
Slug
easy-hide-login
Published
2023-05-09
Title
Easy Hide Login < 1.0.8 - Admin+ Stored XSS
Slug
easy-hide-login
Published
2023-05-09
Title
Easy Hide Login < 1.0.9 - Arbitrary settings update via CSRF
Slug
easy-hotel
Published
2025-09-22
Title
Easy Hotel Booking <= 1.8.8 - Contributor+ Stored XSS
Slug
easy-hotel
Published
2026-01-29
Title
Easy Hotel Booking <= 1.8.4 - Missing Authorization
Slug
easy-image-collage
Published
2024-06-27
Title
Easy Image Collage < 1.13.6 - Missing Authorization to Authenticated (Contributor+) Data Clearance
Slug
easy-image-display
Published
2025-03-11
Title
Easy Image Display <= 1.2.5 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
easy-image-gallery
Published
2025-07-02
Title
prettyPhoto JavaScript Library <= 3.1.6 - Contributor+ Stored XSS
Slug
easy-invoice
Published
2025-12-15
Title
Easy Invoice < 2.1.5 - Authenticated (Administrator+) Local File Inclusion
Slug
easy-invoice
Published
2025-10-29
Title
Easy Invoice < 2.1.0 - Unauthenticated Stored Cross-Site Scripting
Slug
easy-jump-links-menus
Published
2025-12-04
Title
Easy Jump Links Menus <= 1.0.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Attributes
Slug
easy-justified-gallery
Published
2021-08-09
Title
Titan Framework <= 1.12.1 - Reflected Cross-Site Scripting (XSS)